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IN THE CLAIMS 

The current claims follow. For claims not marked as amended in this response, any 
difference in the claims below and the previous state of the claims is unintentional and in the nature 
of a typographical error. 

1 . (Currently Amended) A router for intercoimecting extemal devices coupled to said 
router, said router comprising: 
a switch fabric; and 

a plurality of routing nodes coupled to said switch fabric, wherein each of said plurality of 
routing nodes comprises packet processing circuitry capable of for transmitting data packets to, and 
receiving data packets from, said extemal devices and further capabl e of for transmitting data packets 
to, and receiving data packets from, other ones of said plurality of routing nodes via said switch 
fabric, wherein said packet processing circuitry comprises: 

a first network processor comprising a first plurality of microengines, each of said 
first plurality of microengines capabl e of for performing security and classification functions 
associated with said data packet s, wherein said first network processor processes data packets 
being transmitted from said extemal devices to said switch fabric : and 

a second network processor comprising a second plurality of microengines, each of 
said second plurality of microengines capabl e of for performing security and classification 
functions associated with said data packet s, wherein said second network processor processes 
data packets being transmitted from said switch fabric to said extemal devices . 
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2. (Original) The router as set forth in Claim 1 wherein said security and classification 
functions comprise replacing a source address associated with header information of a first data 
packet with an address selected fi'om a pool of router addresses associated with said router. 

3. (Original) The router as set forth in Claim 1 wherein said security and classification 
functions comprise filtering a first data packet based on at least one of: 1) a Layer 2 address 
associated with said first data packet; 2) a Layer 3 address associated with said first data packet; and 
3) a traffic type associated with said first data packet. 

4. (Original) The router as set forth in Claim 1 wherein said security and classification 
fiinctions comprise filtering a first data packet based on at least one of: 1) a Layer 4 address 
associated with said first data packet; and 2) a class of service (CoS) value associated wdth said first 
data packet. 

5. (Original) The router as set forth in Claim 1 wherein said security and classification 
functions comprise performing a Network Address Translation (NAT) function to provide subnet 
independence. 

6. (Original) The router as set forth in Claim 1 wherein a first one of said first plurality 
of microengines is capable of executing N threads, wherein each of said N threads performs at least 
one security and classification function. 
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7. (Original) The router as set forth in Claim 6 wherein a first one of said second 
plurality of microengines is capable of executing M threads, wherein each of said M threads 
performs at least one security and classification function. 

8. (Cancelled). 

9. (Cancelled). 

1 0. (Currently Amended) A communication network comprising a plurality of routers that 
communicate data packets to one another and to interfacing external devices, each of said plurality of 
routers comprising: 

a switch fabric; and 

a plurality of routing nodes coupled to said switch fabric, wherein each of said plurality of 
routing nodes comprises packet processing circuitry capabl e of for transmitting data packets to, and 
receiving data packets fi-om, said extemal devices and further capabl e of for transmitting data packets 
to, and receiving data packets from, other ones of said plurality of routing nodes via said switch 
fabric, wherein said packet processing circuitry comprises: 

a first network processor comprising a first plurality of microengines, each of said 
first plurality of microengines capabl e of for performing security and classification functions 
associated with said data packet s, wherein said first network processor processes data packets 
being transmitted from said extemal devices to said switch fabric ; and 
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a second network processor comprising a second plurality of microengines, each of 
said second plurality of microengines capable of for performing security and classification 
functions associated with said data packet s, wherein said second network processor processes 
data packets being transmitted from said switch fabric to said external devices . 

1 1 . (Original) The communication network as set forth in Claim 1 0 wherein said security 
and classification functions comprise replacing a source address associated with header information 
of a first data packet with an address selected from a pool of router addresses associated with said 
router. 

12. (Original) The communication network as set forth in Claim 1 0 wherein said security 
and classification functions comprise filtering a first data packet based on at least one of : 1 ) a Layer 2 
address associated with said first data packet; 2) a Layer 3 address associated with said first data 
packet; and 3) a traffic type associated with said first data packet. 

1 3 . (Original) The communication network as set forth in Claim 1 0 wherein said security 
and classification functions comprise filtering a first data packet based on at least one of : 1 ) a Layer 4 
address associated with said first data packet; and 2) a class of service (CoS) value associated with 
said first data packet. 
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1 4. (Original) The communication network as set forth in Claim 1 0 wherein said security 
and classification functions comprise performing a Network Address Translation (NAT) function to 
provide subnet independence. 

1 5 . (Original) The communication network as set forth in Claim 1 0 wherein a first one of 
said first plurality of microengines is capable of executing N threads, wherein each of said N threads 
performs at least one security and classification fimction. 

1 6. (Original) The communication network as set forth in Claim 1 5 wherein a first one of 
said second plurality of microengines is capable of executing M threads, wherein each of said M 
threads performs at least one security and classification function. 

17. (Cancelled). 

18. (Cancelled). 

1 9. (Currently Amended) For use in a router comprising a switch fabric and a plurality of 
routing nodes coupled to the switch fabric, each of the routing nodes capable of for transmitting data 
packets to. and receiving data packets fi-om, external devices and transmitting data packets to, and 
receiving data packets fi^om, other routing nodes via the switch fabric, a method of performing 
security and classification functions comprising the steps of: 
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performing security and classification functions in a first network processor comprising a first 
plurality of microengines, each of said first plurality of microengines capable of executing said 
security and classification fimction s. wherein the first network processor processes data packets 
being transmitted from the extemal devices to the switch fabric ; and 

performing security and classification fimctions in a second network processor comprising a 
second plurality of microengines, each of the second plurality of microengines capable of executing 
the security and classification function s, wherein the second network processor processes data 
packets being transmitted from the switch fabric to the extemal devices . 

20. (Original) The method as set forth in Claim 1 9 wherein the security and classification 
functions comprise replacing a source address associated with header information of a first data 
packet with an address selected fi-om a pool of router addresses associated with the router. 

2 1 . (Original) The method as set forth in Claim 1 9 wherein the security and classification 
fimctions comprise filtering a first data packet based on at least one of: 1) a Layer 2 address 
associated with the fu-st data packet; 2) a Layer 3 address associated with the first data packet; and 3) 
a traffic type associated with the first data packet. 
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22. (Original) The method as set forth in Claim 1 9 wherein the security and classification 
functions comprise filtering a first data packet based on at least one of: 1) a Layer 4 address 
associated with the first data packet; and 2) a class of service (CoS) value associated with the first 
data packet. 

23 . (Original) The method as set forth in Claim 1 9 wherein the security and classification 
functions comprise performing a Network Address Translation (NAT) fimction to provide subnet 
independence. 
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